Privacy Policy

Overview

ClearSplit is a web-based tool for managing the financial side of divorce. We process case and account information so authorized users can organize assets, debts, income, and expenses, generate settlement documents, and produce court-ready export bundles. This policy explains what data we collect, how we use it, and the rights you have over your information.

Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store passwords in readable form.

Case Data

Users enter case information including asset descriptions, debt balances, income sources, expense records, party names, and uploaded documents. All uploaded documents are encrypted at rest using per-case encryption keys and stored in cloud object storage. Case data is accessible only to users with valid case membership.

Operational Data

We log login attempts (IP address and timestamp), audit history (who changed what and when), billing events, and technical metadata necessary for security monitoring and service performance.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank accounts, or other payment credentials on our servers. We retain only the Stripe session identifier necessary to link your case purchase to your account.

How We Use Information

• Provide secure case access and role-based collaboration controls
• Generate settlement calculations, balance sheets, MSA documents, and court export bundles
• Maintain a complete, immutable audit trail for defensible case review
• Process one-time case purchases and manage case access periods
• Detect and prevent unauthorized access through rate limiting and login monitoring
• Send transactional emails including password resets, case invitations, and purchase receipts

Data Sharing

We do not sell, rent, or share your data with third parties for marketing purposes. Data is shared only with:

• Stripe — for payment processing, governed by Stripe's Privacy Policy
• Infrastructure providers — hosting and storage services necessary to operate the platform, bound by data processing agreements
• Legal requirements — when required by law, subpoena, or valid court order

Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Per-case envelope encryption for all uploaded documents
• Hashed password storage using scrypt key derivation
• CSRF protection on all form submissions
• Rate limiting on authentication endpoints
• Security headers (CSP, HSTS, X-Frame-Options)
• Role-based access control with party-scoped data visibility

Data Retention

Purchased cases remain fully active for 36 months from the date of purchase, after which they transition to read-only archive status with lifetime access. Upon account deletion request, case data is retained for 90 days to allow recovery, after which it is permanently deleted. Audit logs are retained independently for compliance purposes as described in our Retention Policy.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. Case creators may export all case data via the built-in CSV, JSON, or PDF export features before requesting account deletion.

Legal and Professional Notice

Contact

Privacy and data protection inquiries: legal@clearsplit.com